Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
File:                     E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer (raw, json)
Hash identifier:          L2WK1RhTaXuM4LlpT0kTWKVGDhXKsmzeQyEgXmmb4lM=
Subject key identifier:   E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2839B15049151B5C393EC4FAD1E95057332B5AC2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 03:33:27 +0000
Certificate not after:    Thu 03 Apr 2025 03:38:27 +0000
Subordinate resources:    AS: 268513
                          IP: 45.161.212.0/22
                          IP: 2804:525c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 12:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:39:b1:50:49:15:1b:5c:39:3e:c4:fa:d1:e9:50:57:33:2b:5a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 03:33:27 2024 GMT
            Not After : Apr  3 03:38:27 2025 GMT
        Subject: CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a3:97:d4:5e:82:79:32:fa:03:c6:ef:3a:7c:
                    cf:d3:7a:ae:d3:15:a5:81:f8:36:34:cf:9e:5c:0f:
                    ba:0d:62:9f:eb:4f:ba:48:23:26:f5:a0:f5:ab:99:
                    0e:69:b7:c8:5f:9e:06:7b:47:42:61:24:6f:97:85:
                    1a:09:d1:c2:31:4f:d2:42:e7:c1:b7:c1:fb:48:80:
                    05:21:5c:a3:3d:fc:0b:d3:00:aa:95:63:d7:a1:74:
                    63:fd:ef:f0:47:ea:dc:e6:fc:51:a8:0f:91:b3:67:
                    66:9b:a4:be:fe:63:b4:ad:21:59:26:0f:e6:5a:c6:
                    6c:73:37:41:aa:91:d2:45:e7:9d:14:66:a3:5c:5f:
                    ee:2c:2d:86:ea:86:05:99:83:a7:61:f8:ea:8e:0a:
                    e8:0b:ea:2e:0a:ea:b9:f0:7b:22:cd:5e:5e:26:21:
                    cd:11:ff:62:98:2b:78:ed:7c:7d:44:65:88:56:c7:
                    f3:39:3b:63:05:95:19:b3:f2:24:79:aa:7c:85:25:
                    4c:cc:20:a6:eb:c5:69:f3:59:30:90:ef:e4:25:1c:
                    9b:03:dc:00:6d:e0:a0:46:31:c2:91:fc:24:34:60:
                    8d:f0:7d:54:16:8f:df:9b:ac:bc:bd:ae:ee:e3:16:
                    fe:20:6a:0a:97:7d:5b:42:7c:15:9f:83:2a:3c:34:
                    52:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.212.0/22
                IPv6:
                  2804:525c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268513

    Signature Algorithm: sha256WithRSAEncryption
         45:10:29:7b:10:e6:86:2b:41:a7:f3:cf:15:44:dc:c4:4f:5e:
         66:41:d3:4a:41:c3:bb:09:9c:ae:c4:61:41:0d:b5:1a:46:7f:
         50:19:a1:7c:b2:c9:6c:45:e0:14:7c:73:3f:33:69:b1:5c:57:
         24:c9:0e:49:6c:cc:7a:51:3f:3a:e3:4a:63:54:f2:96:b0:11:
         30:a4:f5:a2:94:22:7a:23:13:fe:7a:5e:0a:53:73:d0:40:53:
         2f:cb:32:4f:fd:74:87:90:bb:cd:e4:f6:f3:57:47:3c:69:6b:
         38:ec:0f:e9:7f:4a:c0:87:33:b3:d1:a4:aa:f6:ab:67:70:f6:
         f3:39:8e:57:ab:8b:bd:21:97:f7:a7:e4:97:b7:3c:0f:73:66:
         38:a9:02:b9:95:21:5d:e2:04:41:18:d8:ca:f8:11:cc:74:d6:
         46:b7:f7:bf:05:c0:47:67:73:bd:61:e9:18:62:0a:06:0e:74:
         5d:c1:9f:db:ff:f5:7a:a9:b5:df:fd:a9:37:e0:34:94:2c:2b:
         ec:25:c0:87:09:ed:ba:2c:95:ef:dc:54:21:11:11:cf:e7:21:
         a5:43:3a:30:5e:2a:b7:b0:de:d1:07:d8:98:ca:fc:2f:ec:63:
         a2:5d:03:c6:38:7d:ce:a2:4e:02:15:4c:57:d7:d6:6c:c9:50:
         ec:bd:53:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 12:40:39 2024 by rpki-client on console-fra.rpki-client.org